TLS Handshake or Cert issues

Server Version#: 1.41.5.9626-72009626

My remote access suddently stopped working as of yesterday. I’ve dove into the research on it and in the logs I was getting TLS Handshake issues for numerous reasons. I unclaimed the server, uninstalled it from the Synology NAS, reinstalled it and reclaimed the server.

The logs now shows what appears to be issues fetching a new certificate and has timed out for the day, saying it will not attempt to fetch anymore.

Please advise or reset certificate if needed. Thank you!

You need to update your plex version.

I checked that and I’m currently on the latest version. I updated it today just to make sure.

That’s the latest version that Synology is hosting via package center. You can download the package from plex and do a manual install through package center to get current:

https://www.plex.tv/media-server-downloads/?cat=nas&plat=synology-dsm72

Switch the version based on what DSM version you have.

For your main issue, check the plex media server.log file for csr: 429 errors.

I checked the website you sent and I’m on the latest version for the NAS. The only CSR stuff I am getting is this:

certificate/csr?reason=missing&invalidIn=0

certificate/csr?reason=missing&invalidIn=0 (reused)

I’m not seeing anything in the logs with CSR 429.

Thanks for the help!

You aren’t on the latest….the latest for DSM 6, 7 and 7.2.2 is v.1.43.2.10687. The version you list in your original post is the version in package center, which is out of date.

Hopefully one of the mods or plex employees can look at your account, looks like you’re rate limited, but maybe it’s something else.

Oh I see what you mean. It seems like I listed from the wrong place. My version is 1.43.2.10687 when I look at it in the actual server. I’m hoping it’s a cert reset that Plex can do because I don’t have anything else I know of to check on my end. Port forward and IPs are good too and it’s already a static IP as well. I appreciate the help.

Your cert is perfectly valid.

Ok thank you! I’m going to keep troubleshooting on my end and see if I can figure out the issue. I appreciate the help.

Can you access your server direct via http://<public-ip>:32400/web , replace 32400 with the external port you’re using.

Does your port still show as open: https://canyouseeme.org/

Did your isp move you to CGNAT? Is the wan ip in your router between 100.64.0.0 - 100.127.255.255? If not, does it match the ip you see at the canyouseeme site?

Do you have a vpn running on the Synology?

Thanks veeejay! I’ll get in there later today and test everything you sent and update here. If the cert is good then I think it must be my equipment and I’ll post more detailed information on my setup and what I’m seeing on my end.

I appreciate all of the help! I figured it out. Deleted the port forward rule and restarted the whole rack. Redid the port forward and plex is talking to the servers like it should. Thank you all!